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Top Stories 

• Wells Fargo and JPMorgan Chase agreed January 22 to pay $35.7 million in penalties and 
consumer compensation to resolve allegations that loan officers with the 2 banks 
participated in a mortgage kickback scheme with a now-defunct company. - Associated 
Press (See item 8) 

• A severe winter storm in the Northeast region of the U.S. January 26 prompted the 
cancellation of 6,175 flights. - USA Today (See item 9 ) 

• A Lewisburg, West Virginia water treatment plant was shut down after more than 3,500 
gallons of diesel fuel spilled into the Greenbrier River January 23, prompting a water 
outage impacting 12,000 county residents and businesses. - Charleston Daily Mail (See 
item 18 ) 

• Huntsville police arrested an AT&T contractor January 23 for allegedly stealing tens of 
thousands of dollars in copper from substations within north Alabama, causing an 
estimated $1 million in damage. - Huntsville Times (See item 26 ) 
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Energy Sector 



1. January 25, Los Angeles Daily News - (California) Strong winds leave 52,500 
without power in San Fernando Valley. Los Angeles Department of Water and 
Power crews worked to restore power to the remaining 17,527 residents in the San 
Fernando Valley January 25 after approximately 52,500 households and businesses lost 
service January 24 due to strong wind gusts. 

Source: http://www.dailvnews.com/general-news/20150124/strong-winds-leave-5250Q- 
without-power-in-san-fernando-vallev 

2. January 24, Associated Press - (Montana) After oil spill, company says new line will 
be safer. Bridger Pipeline LLC reported January 23 that it will replace the damaged 
section of the Poplar Pipeline in Montana following a January 17 spill that leaked 
nearly 40,000 gallons of oil into the Yellowstone River, contaminating the water supply 
for 6,000 residents of Glendive. The pipeline will remain shut down until the damaged 
section is replaced with a new line that will be buried deeper to protect against future 
accidents. 

Source: http://www.tulsaworld.com/business/energy/after-oil-spill-company-says-new- 
line-will-be-safer/article 2c2( ) 1 1 47-0cb4-5656-8364-afae0e 1 6f95d.html 

3. January 24, Associated Press - (Montana) Exxon given $1 mi llion penalty after 2011 
Yellowstone River oil spill. The U.S. Department of Transportation issued a $1 
million penalty against Exxon Mobil Corp., January 23 for safety violations following a 
201 1 pipeline rupture that spilled 63,000 gallons of crude into Montana’s Yellowstone 
River, killing fish and wildlife. 

Source: http://www.huffingtonpost.com/2015/01/24/yellowstone-oil-spill- 
fine n 6535880.html 

4. January 23, Securityweek - (National) US gas stations exposed to cyberattacks: 
Researchers. Researchers with Kachoolie discovered a vulnerability with automatic 
tank gauges (ATGs) used to monitor fuel tanks, that could potentially allow malicious 
actors to shut down over 5,300 gas stations in the U.S. due to the device’s easy 
accessibility through the Internet. Operators of the ATG systems can set up a password 
for the series interface, but the port often remains unprotected. 

Source: http://www.securityweek.com/us-gas-stations-exposed-cyberattacks- 
researchers 

5. January 23, San Francisco Business Times - (California) PG&E fined $530,000 by 
regulator for safety violations. The California Public Utilities Commission issued a 
$530,000 penalty against Pacific Gas & Electric January 23 for safety violations, which 
included the utility’s failure in immediately digging and examining pipelines that 
showed signs of potential deterioration, allowing non-qualified personnel to perform 
field work, and failing to repair potentially hazardous defects. 

Source: http://www.biziournals.com/sanfrancisco/blog/2015/01/pg-e-fined-cpuc-san- 
bruno-explosion-email-scandal.html 
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For another story, see item 18 
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Chemical Industry Sector 

Nothing to report 
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Nuclear Reactors, Materials, and Waste Sector 

Nothing to report 



T Return to top i 

Critical Manufacturing Sector 

6. January 24, Associated Press - (National) Kia recalling nearly 87,000 Fortes 
because of fire risk. Kia Motors America announced January 24 a recall of nearly 
87,000 model year 2014 Forte vehicles manufactured between December 2012 and 
April 2014 due to a faulty cooling fan resistor that could cause the equipment to 
overheat and melt, posing a possible fire hazard. 

Source: http://abcnews.go.com/US/wireStorv/kia-recalling-87000-fortes-fire-risk- 
28452041 
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Defense Industrial Base Sector 

Nothing to report 
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Financial Services Sector 

7. January 25, WAVE 3 Louisville - (Kentucky; Indiana) More than 150 fraudulent 
credit cards found during traffic stop. A Louisville driver and passenger were 
arrested and charged with one count of fraud January 22 after approximately 170 
fraudulent credit cards were discovered in the suspect’s car during an unrelated traffic 
stop in Seymour by Indiana State Police. 

Source: http://www.wave3.com/story/27934977/more-than-150-fraudulent-credit- 
cards-found-during-traffic-stop 

8. January 22, Associated Press - (Maryland; Virginia; New York) Wells Fargo, 
JPMorgan settle mortgage kickbacks probe. Wells Fargo and JPMorgan Chase 
agreed January 22 to pay a collective $35.7 million in penalties and consumer 
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compensation to resolve allegations that loan officers with the 2 banks participated in a 
mortgage kickback scheme with a now-defunct company, Genuine Title, in exchange 
for cash and marketing services. More than 100 former Well Fargo loan officers in at 
least 18 branches located primarily in Maryland and Virginia, and at least 6 former 
JPMorgan Chase loan officers in 3 separate branches in Maryland, Virginia, and New 
York, were involved with the scheme. 

Source: http://abcnews.go.com/Business/wireStorv/ipmorgan-wells-fargo-settle- 
mortgage-kickbacks-probe-284 11620 

For another story, see item 25 
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Transportation Systems Sector 

9. January 26, USA Today - (National) Airlines cancel 6,175 flights ahead of monster 
storm. A severe winter storm in the Northeast region of the U.S. January 26 prompted 
the cancellation of 6,175 flights, over 220 of which were cancelled through January 28, 
across dozens of airports in the storm’s path. 

Source: http://www.usatodav.com/storv/todavinthesky/2015/01/25/ahiines- 
preemptivelv-cancel-450-flights-ahead-of-mondav-storm/22320939/ 

10. January 26, San Bernardino Sun - (California) Lanes closed on 10 Freeway in 
Fontana after fiery crash. Two lanes of the 10 Freeway in Fontana were reopened 
after closing for 2 hours January 26 when a semi-truck driver was killed after 
reportedly losing control of the vehicle and slamming into a pole. 

Source: http://www.sbsun.com/general-news/20150126/lanes-closed-on-10-freeway-in- 
fontana-after-fiery-crash 

11. January 25, KING 5 Seatde - (Washington) ‘Security concerns’ on two flights 
landing at Sea-Tac. Seattle-Tacoma International Airport officials cleared a JetBlue 
and a Delta flight to return to their respective gates January 23 following security 
concerns on both planes that prompted the evacuation of passengers and the diversion 
of a second Delta flight from Los Angeles to Dallas. 

Source: 



12. January 25, Milwaukee Journal Sentinel - (Wisconsin) Bus crashes on 1-94, injuring 
11, after driver collapses. Eleven passengers were injured after the driver of a charter 
bus suffered an unspecified medical emergency causing the bus to drift into a concrete 
wall on the right shoulder of Interstate 94 in Kenosha County January 24. 

Source: http://www.isonline.com/news/traffic/bus-crashes-on-i-94-iniuring-ll-after- 
driver-collapses-b99432484zl-28972041 l.html 

13. January 24, Visalia Times-Delta - (California) Traffic moving again on Highway 
198. Westbound lanes and all but 1 eastbound lane of Highway 198 near Farmersville 
Boulevard in California were closed for more than 3 hours January 24 after a vehicle 
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hit a utility pole causing the top portion to sink near the ground, potentially blocking 
traffic. 

Source: http://www.visaliatimesdelta.com/story/news/local/2015/01/24/fallen-pole- 
affects-hwy-traffic/22285443/ 



For another story, see item 5 
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Food and Agriculture Sector 

14. January 26, U.S. Department of Agriculture - (Illinois) Illinois firm recalls chicken 
steak products due to misbranding and undeclared allergens. The Food Safety and 
Inspection Service announced January 23 that Aspen Foods Div. of Koch Foods, Inc., 
recalled about 1,140 pounds of Market Day Teriyaki Flavored ChicNSteakes and 
Market Day Lemon Pepper ChicNSteakes products due to undeclared wheat and soy 
caused by misbranding. The recalled products were produced December 13 and 
packaged in 2-pound selling unit boxes that were shipped to distribution locations in 
Illinois for further distribution. 

Source: http://www.fsis.usda.gov/wps/portal/fsis/topics/recalls-and-public-health- 
alerts/recall-case-archive/archive/2015/recall-01 9-201 5-release 



15. January 26, U.S. Department of Agriculture - (Arizona; Colorado) Arizona firm 
recalls chicken breast fritters products due to misbranding and an undeclared 
allergen. The Food Safety and Inspection Service reported January 23 that Primecut 
Meats recalled about 17,700 pounds of its Prime Poultry Chicken Breast Fritters due to 
undeclared eggs caused by misbranding. The affected product was packaged in 4- 
pound boxes and shipped to retail locations in Arizona and Colorado. 

Source: http://www.fsis.usda.gov/wps/portal/fsis/topics/recalls-and-public-health- 
alerts/recall-case-archi ve/archive/20 1 5/recall-020-20 1 5-release 



16. January 25, Los Angeles Times - (California) Avian flu detected at Central Valley 
farm. The California Department of Food and Agriculture quarantined a Foster Farms- 
operated facility in Stanislaus County after the H5N8 virus, a strain of avian flu, was 
detected among a flock of turkeys at the ranch. Company officials reported that no 
products on the market were affected by the outbreak, and the U.S. Department of 
Agriculture agreed to assist State officials in euthanizing the birds to prevent the 
disease from spreading. 

Source: http://www.latimes.com/local/lanow/la-me-ln-avian-flu-central-vallev- 
20150125-story.html 

17. January 23, Food Safety News - (National) CDC: 115-case Salmonella outbreak 
linked to bean sprouts is officially over. The U.S. Centers for Disease Control and 
Prevention issued its final report into a Salmonella outbreak connected to Wonton 
Foods Inc. bean sprouts January 23 and declared that the outbreak was over after 
causing at least 115 illnesses in 12 States in the Northeast region of the U.S. Wonton 
Foods agreed in November 2014 to destroy remaining products while their facilities 
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underwent a thorough cleaning and sanitization before the company resumed shipping 
bean sprouts November 29. 

Source: http://www.foodsafetvnews.com/2015/01/bean-sprout-salmonella-outbreak-in- 
northeast-declared-over- with- 11 5-cases 
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Water and Wastewater Systems Sector 

18. January 25, Charleston Daily Mail - (West Virginia) 12,000 without water in 
Greenbrier County after diesel spill. The Lewisburg water treatment plant in West 
Virginia was shut down after a semi-truck rolled over and spilled more than 3,500 
gallons of diesel fuel into a tributary of the Greenbrier River January 23, prompting a 
water outage January 25 which impacted 12,000 county residents and businesses. 
Crews began taking water samples and placing booms in Anthony Creek to contain the 
spill and officials closed several schools in the area due to the incident. 

Source: http://www.charlestondailvmail.com/article/20 1501 25/DMO 1/1 50 1 29502 
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Healthcare and Public Health Sector 

Nothing to report 
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Government Facilities Sector 

19. January 26, WUSA 9 Washington, D.C. - (Washington, D.C.) Drone found on White 
House grounds. Officials are investigating after a drone crashed on the Southeast 
grounds of the White House in Washington, D.C., January 26 prompting an immediate 
alert and lockdown. The U.S. Secret Service examined and cleared the threat. 

Source: http://www.wusa9.com/storv/news/local/2015/01/26/device-found-on- white- 
house-grounds/22338063/ 

20. January 26, Philly.com - (New Jersey) Students hospitalized after lab incident at 
Glouco school. Kingsway Regional High School students and staff were evacuated and 
20 students were transported to an area hospital in Gloucester County, New Jersey, 
January 26 following a chemistry-lab accident involving chloric acid which produced 
heavy smoke in the building. 

Source: 

http://www.philly.com/phillv/news/new jersey/20150127 Students hospitalized after 
lab incident at Glouco school.html 

21. January 23, WBMA 58 Birmingham - (Alabama) School bus overturns in Pinson. 
Authorities are investigating after 10 Jefferson Elementary School students were 
injured and transported to area hospitals when their school bus overturned in Pinson on 
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Rudd School Road January 23. 

Source: http://www.abc3340.com/story/27926782/school-bus-overtums-in-pinson 



For another story, see item 18 
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Emergency Services Sector 

22. January 25, WBIR 10 Knoxville - (Tennessee) Both escaped Sevier County inmates 
back in custody. Officials reported that 2 inmates who escaped from the Sevier County 
Jail in Tennessee January 23 were recaptured January 25. 

Source: http://www.wbir.com/story/news/2015/01/24/two-inmates-escape-from-sevier- 
county-jail/22266787/ 
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Information Technology Sector 

23. January 24, Softpedia - (International) PHP 5.6.5 fixes flaw leading to remote code 
execution. The latest version of hypertext preprocessor (PHP) version 5.6.5 closes 
several security vulnerabilities including a flaw identified as CVE-20 14-9427 that 
could be exploited by an attacker to execute code remotely on an affected machine if 
certain conditions are met. 

Source: http://news.softpedia.com/news/PHP-5-6-5-Fixes-Flaw-Leading-to-Remote- 
Code-Execution-47 1 101 .shtml 

24. January 23, Softpedia - (International) Google Apps admin panel falls for XSS, issue 
researcher gets $5,000. Google awarded a Blizzard Entertainment researcher for 
discovering a cross-site scripting (XSS) vulnerability that relied on a JavaScript code to 
be executed in the Google Apps administration console, which would grant an attacker 
full control of the Google account. 

Source: http://news.softpedia.com/news/Google-Apps-Admin-Panel-Falls-for-XSS- 
Issue-Researcher-Gets-5-000-47 1056. shtml 

25. January 22, Softpedia - (International) Mobile banking apps are risky business for 
Android users. A RisklQ report found that more than 40,000 of about 350,000 mobile 
apps used for financial transactions should be considered suspicious with many of them 
containing malware and adware. 

Source: http://news.softpedia.com/news/Mobile-Banking-Are-Riskv-Business-for- 
Android-Users-47 0918 .shtml 
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Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT IS AC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 

26. January 23, Huntsville Times - (Alabama) AT&T contractor accused of stealing 
more than $1 million in copper faces charges in Huntsville, Birmingham. 

Huntsville police arrested a worker January 23 from a contracting company that 
serviced AT&T in connection to allegedly using his position to steal tens of thousands 
of dollars in copper from substations within north Alabama, causing an estimated $1 
million in damage. 

Source: 

http://www.al.com/news/index.ssf/2015/01/att contractor accused of stea.html 
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Commercial Facilities Sector 

27. January 26, KCBS 2 Los Angeles - (California) 6-alarm grass fire in Pacifica 
contained. Residents from 64 units of the Seacrest Townhomes complex and about 30 
additional homes in Pacifica were evacuated for several hours January 26 due to a 6- 
alarm, 5-acre vegetation fire that began in a canyon between Rockaway Beach and 
Fassler Avenues. Firefighters contained the blaze about 4 hours after it broke out and 
crews worked to cut down the perimeter around the bum zone. 

Source: http://sanfrancisco.cbslocal.com/2015/01/26/5-alarm-grass-fire-grows-in- 
pacifica-some-residents-being-evacuated/ 

28. January 26, Associated Press - (New York) City officials shut down Buffalo bar 
after weekend shooting. The City of Buffalo issued a cease and desist order shutting 
down Impulse after a man was shot and wounded following a fight that broke out inside 
the nightclub January 24. 

Source: http://www.oleantimesherald.com/news/westem new york/article 2149fldc- 
a57c-lle4-9201-8b0c2df959fc.html 

29. January 25, Los Angeles Times - (New York) Gunman at Home Depot in New York 
kills employee and self, police say. A former employee of a Home Depot store in the 
Manhattan area of New York City died from a self-inflicted gunshot wound after 
entering the business January 25 and fatally shooting an employee. 

Source: http://www.latimes.com/nation/nationnow/la-na-nn-new-york-home-depot- 
shooting20150125-story.html 
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30. January 24, WJFW 12 Rhinelander - (Wisconsin) Apartment fire displaces 28 people 
in Medford. A January 24 fire at the Riverview Village Apartment complex in 
Medford, Wisconsin, displaced 28 residents due to fire, smoke, and water damage to 
the structure. 

Source: http://www.wifw.com/stories.html?sku=201501 242147 10 

31. January 24, Lynchburg News & Advance - (Virginia) Smoke odor forces mall theater 
to close early. The Regal Cinemas 14 theater at River Ridge Mall in Lynchburg was 
evacuated and closed 2 hours early January 24 due to an electrical short from an outside 
transformer. Investigators determined that a rodent entered the transformer and likely 
caused the short circuit. 

Source: http://www.newsadvance.com/news/local/smoke-odor-forces-river-ridge-mall- 
jgyacuat ion/article 8131 e986-a439~ 1 1 e4-a57d-b7776ed2866d.html 

32. January 24, WJLA 7 Washington, D.C. - (Washington, D.C.) Security guard stabbed 
multiple times during attack inside D.C. Safeway store. Police are investigating 
after a man stabbed a security guard several times in the face and head January 23 
during an attack inside a Safeway grocery store in Washington, D.C. The suspect fled 
the scene and is believed to be a man who was previously banned from the store. 
Source: http://www.wila.com/articles/2015/01/security-guard-stabbed-multiple-tirnes- 
during-attack-inside-d-c-safeway-store-110846.html 

For additional stories, see items 1 and 18 
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Dams Sector 



Nothing to report 
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Department of Homeland Security (DHS) 

DHS Daily Open Source Infrastructure Report Contact Information 

About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
http://www.dhs.gov/IPDailyReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support @ govdelivery.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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